Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
File: AS213525.roa (raw, json)
Hash identifier: Z1KfpLntK9jP3Du8sxvZtbk2AHfqTBSnqQ38KUfg/+k=
Subject key identifier: E2:CA:B2:8C:3F:D8:71:3B:94:DB:90:77:D7:44:DC:AF:1B:33:23:C8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 785BFC95935456008D5B95B1B460A9A0C3D221F5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
Signing time: Sun 23 Aug 2026 15:09:07 +0000
ROA not before: Sun 23 Aug 2026 15:04:07 +0000
ROA not after: Sun 22 Aug 2027 15:09:07 +0000
asID: 213525
IP address blocks: 195.200.21.0/24 maxlen: 24
2a0f:85c1:32b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5b:fc:95:93:54:56:00:8d:5b:95:b1:b4:60:a9:a0:c3:d2:21:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 15:04:07 2026 GMT
Not After : Aug 22 15:09:07 2027 GMT
Subject: CN=E2CAB28C3FD8713B94DB9077D744DCAF1B3323C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:63:0e:57:5b:a8:62:00:53:ff:19:11:e8:
fd:1f:23:1a:58:02:27:29:67:a7:94:b7:64:78:90:
a6:0a:3b:a1:bf:6d:d6:cf:4b:ae:d2:78:ec:d1:b1:
ef:f8:79:19:8b:54:b9:81:b9:0e:3e:1f:be:56:98:
12:9b:1f:93:73:18:fb:c2:70:51:ba:6b:ee:92:e6:
36:8f:04:ef:ed:85:de:66:10:5e:9d:bf:66:95:ea:
ef:4c:2a:06:e5:2e:18:7c:11:a4:75:6f:b7:71:1c:
eb:92:1f:e2:5c:44:1a:7c:f7:77:0f:85:ae:16:94:
0b:29:0d:e5:1e:b1:b2:9e:77:9f:c4:df:ae:16:50:
b5:4b:5f:2a:80:8a:ce:0b:63:69:3b:dd:b4:ec:32:
d6:59:ab:cd:a8:81:b0:92:fd:fb:d1:2e:5e:14:e9:
27:65:ad:d4:54:ae:e4:c3:b8:21:77:da:42:90:7c:
96:25:f3:8d:25:29:96:9e:27:a4:64:0c:a2:ac:f4:
e8:76:b5:3f:cc:ca:a0:d9:26:80:ec:e3:73:8c:73:
27:ae:21:3c:1e:0c:72:cf:72:07:e2:d1:39:13:70:
5e:de:5f:ab:a7:86:19:fa:41:99:ce:a5:8b:d3:fd:
d8:eb:0a:0b:b8:95:66:33:d4:ae:c5:d3:0f:34:88:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:B2:8C:3F:D8:71:3B:94:DB:90:77:D7:44:DC:AF:1B:33:23:C8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.21.0/24
IPv6:
2a0f:85c1:32b::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e6:64:1d:03:98:4e:dd:1e:a0:b1:63:05:32:77:44:74:ee:
19:fc:98:42:bd:44:ed:5f:b0:48:19:e9:ad:8d:4a:1f:01:9e:
89:3e:70:fd:91:31:4d:1b:22:2f:5a:4a:0d:f4:8d:a5:34:8f:
d6:80:57:65:d1:ea:62:c9:87:45:b1:8f:cd:75:7b:e4:b4:e1:
15:d9:75:20:8c:c7:16:d7:54:92:78:2b:7c:93:7c:ae:59:83:
4b:c2:3c:2b:40:34:cc:6d:9c:69:87:ef:d2:3c:dc:cc:c7:f2:
9f:30:18:ec:9b:34:ae:e7:7c:8d:64:69:cc:5c:95:2a:7e:9c:
11:0f:13:6d:dc:11:69:56:ca:52:fc:08:54:f9:4f:aa:29:f3:
2d:57:1a:1d:b7:e9:a2:f9:15:85:20:bd:32:f7:3b:f3:cf:8f:
58:eb:8f:4c:9a:be:a1:33:f3:2e:ac:4e:c6:44:d3:06:1e:d5:
3c:2a:f9:02:88:01:2d:55:1d:c6:88:c9:5f:b9:bb:96:b7:a2:
f3:e3:d2:d6:f0:8b:f7:6b:aa:10:eb:0d:25:73:b7:8c:35:52:
66:39:c0:c8:ef:c3:9a:b8:96:35:83:50:37:74:18:b9:70:21:
b0:e8:64:10:58:0a:d7:2f:7b:b6:ea:ac:c3:27:e6:11:a6:a8:
f5:39:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:53 2026 by rpki-client